CVE-2007-4525
EPSS 0.93%發布日:2007/8/25修改日:2026/5/29
也稱為:DEBIAN-CVE-2007-4525
描述
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelette_cache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the squelette_cache variable is initialized before use, and is only used within the scope of a function
受影響套件(1)
- Debian/spipfrom 0, < 2.0.6-1